Set up MFA

Enrollment requires a verified owner account and a fresh password check.